Re: Network sniffing on the wire - managed switches

There's probably better ways of doing it now, but it used to be true
that you could flood the switch with MAC addresses, overwhelming the
arp table. This would have the effect of turning the switch into a
hub.

Hey all,
This may come off as somewhat of a newbie question, but it's one I've been
curious about.

When you are doing any sort of pen testing or sniffing on the wire, how do
you handle a managed switch scenario. If you're connected to a switch on
one port, how can you monitor the traffic on the the other ports if you're
not in a monitor mode? I've never understood how you can sniff traffic
other than the traffic from your machine to a destination.

Relevant Pages

RE: ARP issues with dual ethernet link and CE 6.0 R2... Isn't there some way, when you swap from port 1 to port 2 on the switch, to ... internal 10/100 Mbit ethernet MAC) and running Microsoft Windows ... traffic between the two we can see that the device sends an ARP...(microsoft.public.windowsce.platbuilder)

Re: ARP issues with dual ethernet link and CE 6.0 R2... Isn't there some way, when you swap from port 1 to port 2 on the switch, to ... internal 10/100 Mbit ethernet MAC) and running Microsoft Windows ... traffic between the two we can see that the device sends an ARP...(microsoft.public.windowsce.platbuilder)

Re: Cat 2924... Copyright 1986-2004 by cisco Systems,... BOX in both H/W and S/W, compared to a C2924-XL Switch......FastEthernet0/1 failed front-end loopback test... to make the port configuration "visible", you need to apply 2 commands ...(comp.dcom.sys.cisco)

Re: Cat 2924... Copyright 1986-2004 by cisco Systems,... BOX in both H/W and S/W, compared to a C2924-XL Switch......FastEthernet0/1 failed front-end loopback test... to make the port configuration "visible", you need to apply 2 commands ...(comp.dcom.sys.cisco)